How can I get the output of Bro in normal time and not UNIX time,using cf.<br>for example,processing a tcpdump capture file:<br><br>/usr/local/bro-1.2/bin/bro -r tcpdumpfile ,I get a list of weird events<br>in UNIX time,and I prefer normal time.<br>
<br>I did not do a complete installation of Bro,I use Bro to analyze my home<br>ADSL connections right after the end of the session,so Bro does not report<br>to log files in the logs directory,it reports to standard output.<br>
When I analyze dump files:<br><br>/usr/local/bro-1.2/bin/bro -r tcpdumpcapturefile so far I get a list of<br>weird events: <br><br>...weird: spontaneous_FIN<br> ...<br>...weird: spontaneous_RST<br> ...<br>...weird: window_recision<br>
...<br>...weird: unsolicited_SYN_response <br><br>etc.,which by itself is not specially troublesome.My question is:<br>if bro ever needs to report more troublesome events,does it follow<br>the same terminology(name) used for the diverse files in the logs <br>
directory?<br>